Malicious code in @shanye3501/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e18457ae0b04b57176a0e8d4a09d0646e05493edd1224fb1ceda27eafe97c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...